blear Posted March 15, 2007 Share Posted March 15, 2007 Recently, my company has decided that session-based login isnt secure enough (Layoffs are coming, they probably expect lots of angry people) and have decided that encrypted login is necessary, even on internal networks. Can someone please give me somewhere to start on implementing this? I have a pretty solid understanding of encryption in general, but the articles I have read are cryptic. Any help you can give me would be much <3'd Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/ Share on other sites More sharing options...
boo_lolly Posted March 15, 2007 Share Posted March 15, 2007 security can be implimented on every level. you'll probably want to start with the first path of entry to your systems... your network. this isn't done in php, altho i'm sure you'd still like to know more about php security. i'd advise finding out what kind of servers your company runs, and go from there. if you're running apache, it is very easy to write apache mods to secure access priviledges to certain applications. i personally don't like Microsoft IIS, but it is relatively rich in customizable features. Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/#findComment-208048 Share on other sites More sharing options...
blear Posted March 15, 2007 Author Share Posted March 15, 2007 Network backbone is handled by a rather large company's IT personnel and with the exception of what I need to make my server work, I am not privy to any of its functionality. (we are not a small company by any means but the number crunchers figure it was a good idea yet whine about the network being junk, but I digress) I am looking at specifically my server, and the login to the web portal I am responsible for. The server itself is secure, I am looking at the PhP scripts that access the data in my databases. Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/#findComment-208060 Share on other sites More sharing options...
boo_lolly Posted March 15, 2007 Share Posted March 15, 2007 so is your main concern preventing sql injection? Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/#findComment-208065 Share on other sites More sharing options...
blear Posted March 15, 2007 Author Share Posted March 15, 2007 My concern is having an encrypted login system. Does anyone have any information or point me to where I can find information on this? Such as SSL implementation? Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/#findComment-208156 Share on other sites More sharing options...
boo_lolly Posted March 15, 2007 Share Posted March 15, 2007 again, this would be done on the server level. if you're running apache, it can be done with an apache mod. google it. Link to comment https://forums.phpfreaks.com/topic/42849-ssl-login/#findComment-208161 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.